Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/76be73fc680d0b27943bf0c8bd7e55e3e766e566.roa
File:                     76be73fc680d0b27943bf0c8bd7e55e3e766e566.roa (raw, json)
Hash identifier:          v/pvwWRLXcmn7FV63JGtmmvCUug95IXbnA+wY/RmnZ8=
Subject key identifier:   1A:0F:4C:D1:40:24:34:C5:87:67:98:B7:0E:49:C9:20:55:4B:0E:9F
Certificate issuer:       /CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
Certificate serial:       080A06
Authority key identifier: 5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/76be73fc680d0b27943bf0c8bd7e55e3e766e566.roa
Signing time:             Wed 24 Mar 2021 14:29:58 +0000
ROA not before:           Wed 24 Mar 2021 14:29:58 +0000
ROA not after:            Tue 24 Mar 2026 14:29:58 +0000
asID:                     265758
IP address blocks:        131.196.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526854 (0x80a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
        Validity
            Not Before: Mar 24 14:29:58 2021 GMT
            Not After : Mar 24 14:29:58 2026 GMT
        Subject: CN=76be73fc680d0b27943bf0c8bd7e55e3e766e566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:ea:56:c1:fa:e3:7f:76:8d:ff:ed:5c:a6:
                    47:7b:fa:84:b7:fa:bd:fb:c3:23:76:40:a3:fb:5a:
                    31:a2:65:b1:d9:b4:d6:ff:24:74:0c:bc:e7:93:86:
                    66:f1:4f:79:6d:a4:8b:3c:1a:e0:65:f8:14:bc:17:
                    19:a9:92:26:30:18:1b:d4:51:d8:09:83:c3:16:f2:
                    c8:8a:dd:0b:e9:a1:47:4a:f4:b9:ef:41:cc:f2:6d:
                    1c:35:07:ed:0a:b9:f8:97:6c:96:b5:38:0b:c1:1e:
                    ac:31:0e:8a:de:53:f1:60:26:b1:39:cc:ae:71:7c:
                    a9:42:a5:c0:72:98:33:79:12:12:9a:d1:14:9e:b3:
                    a2:33:e3:3f:5a:3e:dc:c8:ab:f7:b5:fe:a6:41:17:
                    f4:68:a5:62:92:60:ee:f3:db:35:99:42:27:bc:28:
                    12:91:66:70:5c:91:4b:8d:d8:6d:81:05:ac:f1:d3:
                    6f:44:e0:c2:97:08:60:99:1a:fa:9a:23:21:e1:2f:
                    97:11:c3:9d:01:76:e6:82:a5:19:9b:04:ba:aa:07:
                    b8:30:f0:96:b4:54:97:ec:86:17:43:b4:8c:89:67:
                    2b:06:55:56:b9:5a:d4:df:1e:66:60:2c:19:a6:83:
                    74:9e:c7:59:9f:3b:2c:48:6a:d0:34:fd:ad:fb:9b:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:4C:D1:40:24:34:C5:87:67:98:B7:0E:49:C9:20:55:4B:0E:9F
            X509v3 Authority Key Identifier:
                keyid:5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/76be73fc680d0b27943bf0c8bd7e55e3e766e566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:ff:88:d4:15:c1:e5:f3:4f:95:87:4e:c5:62:5f:90:18:
         13:31:27:dc:34:26:7d:2a:b2:85:04:b4:08:1a:1a:b1:67:4b:
         bc:0f:62:0c:74:ad:8a:f0:a0:05:79:f6:b0:aa:d5:2d:4d:14:
         4c:18:5f:59:d0:16:5f:ce:7e:3c:49:48:b8:8c:79:f7:15:ac:
         68:77:db:d4:17:84:f5:f7:c1:39:d2:be:4a:9e:1a:bc:51:3d:
         dc:e3:aa:50:d8:47:8e:b9:33:7f:21:2f:44:76:7e:ca:0e:0d:
         18:f4:df:26:2a:e1:b2:aa:d4:69:84:bc:ca:22:3c:f9:c0:5a:
         95:a5:f8:23:fa:39:0a:71:b5:4f:4e:82:cf:ef:70:84:6b:e5:
         b2:80:de:78:d9:b3:04:33:c4:f7:95:0a:91:82:d4:67:ae:83:
         15:a1:09:44:09:8b:e7:f4:59:94:74:dc:60:e5:80:78:3d:d6:
         42:67:8e:eb:c1:4c:91:52:b2:54:bf:6a:4a:e2:e0:9a:2d:ba:
         67:3f:1c:ea:a9:6d:53:53:bc:69:d6:dc:03:2d:68:c3:cf:b8:
         a1:16:02:3c:54:b9:a4:8e:49:81:ca:e2:13:83:a0:04:9f:a0:
         3a:2f:95:64:b5:44:00:27:51:b7:06:c6:5c:88:2e:94:b5:33:
         cd:6f:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org